CVE-2023-37979

CVE-2023-37979 認証不要の反射型クロスサイトスクリプティング（XSS）の脆弱性、Saturday Drive Ninja Forms Contact Form プラグイン バージョン 3.6.25 以下に影響。 PoC とチェッカー , 教育目的のみ 'python3 exploit.py https://target.com'...

CVE-2019-10869

CVE-2019-10869 Wordpress Ninja Forms File Uploads Extension -----------------------------16345274557837-- Response: HTTP/1.1 200 OK Server: nginx/1.14.0 "data": "files": "name":"test.png.doc", "type":"application/msword", "tmpname":"nftmp-14FpD-test.png.doc", "error":0, "size":19 When the form is...

CVE-2026-92820

The Ninja Forms - File Uploads plugin for WordPress is vulnerable to arbitrary file operations in all versions up to, and including, 3.3.34 via the external Amazon S3 upload flow. The plugin trusts an attacker-supplied file path from the form submission and stores it as the upload's filepath, whi...

CVE-2026-90438

The Ninja Forms – The Contact Form Builder That Grows With You plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Paragraph Text RTE Field Submission in all versions up to, and including, 3.15.4 due to insufficient input sanitization and output escaping. This makes it possible...

ninja-forms-brute

Ninja Forms 3.6.8 - 未認証のメールアドレス開示 説明 このプラグインは、送信内容のエクスポート時に作成された一時ファイルを削除しないため、ファイルが公開アクセス可能で名前が推測可能な場合、未認証の攻撃者がそのファイルをダウンロードして、フォームを送信したユーザーのメールアドレスなどの機密情報を取得できる可能性があります。 概念実証 エクスポートされたCSV"すべての送信内容をダウンロード"ボタンで全送信内容をエクスポートした際に生成されますは、/wp-content/uploads// フォルダーに以下の形式で保存されます: form--all-subs.csv 例:...

CVE-2026-90438

The Ninja Forms plugin for WordPress is vulnerable to Stored Cross-Site Scripting (XSS) in all versions up to and including 3.15.4 . The root cause is insufficient input sanitization and output escaping within the Paragraph Text (RTE) Field Submission. This allows unauthenticated attackers to inj...

CVE-2026-90438 Ninja Forms <= 3.15.4 - Unauthenticated Stored Cross-Site Scripting via Paragraph Text (RTE) Field Submission

The Ninja Forms – The Contact Form Builder That Grows With You plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Paragraph Text RTE Field Submission in all versions up to, and including, 3.15.4 due to insufficient input sanitization and output escaping. This makes it possible...

EUVD-2026-91177

The Ninja Forms – The Contact Form Builder That Grows With You plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Paragraph Text RTE Field Submission in all versions up to, and including, 3.15.4 due to insufficient input sanitization and output escaping. This makes it possible...

CVE-2026-92820 Ninja Forms - File Uploads <= 3.3.34 - Unauthenticated Arbitrary File Upload

The Ninja Forms - File Uploads plugin for WordPress is vulnerable to arbitrary file operations in all versions up to, and including, 3.3.34 via the external Amazon S3 upload flow. The plugin trusts an attacker-supplied file path from the form submission and stores it as the upload's filepath, whi...

EUVD-2026-91175

The Ninja Forms - File Uploads plugin for WordPress is vulnerable to arbitrary file operations in all versions up to, and including, 3.3.34 via the external Amazon S3 upload flow. The plugin trusts an attacker-supplied file path from the form submission and stores it as the upload's filepath, whi...

CVE-2026-92820 Ninja Forms - File Uploads <= 3.3.34 - Unauthenticated Arbitrary File Upload

The Ninja Forms - File Uploads plugin for WordPress is vulnerable to arbitrary file operations in all versions up to, and including, 3.3.34 via the external Amazon S3 upload flow. The plugin trusts an attacker-supplied file path from the form submission and stores it as the upload's filepath, whi...

CVE-2026-92820

The Ninja Forms - File Uploads plugin for WordPress is vulnerable to arbitrary file operations in all versions up to and including 3.3.34 . The root cause is that the plugin trusts an attacker-supplied file path from form submissions during the External File Upload (Amazon S3) flow. This unvalida...

Ninja Forms File Uploads <= 3.3.26 - Arbitrary File Upload

Ninja Forms File Uploads plugin for WordPress versions up to and including 3.3.26 is vulnerable to unauthenticated arbitrary file upload which could lead to remote code execution. id: CVE-2026-0740 info: name: Ninja Forms File Uploads = 3.3.26 - Arbitrary File Upload author: whattheslime severity...

WordPress Ninja Forms <3.4.34 - Open Redirect

WordPress Ninja Forms plugin before 3.4.34 contains an open redirect vulnerability via the wpajaxnfoauthconnect AJAX action, due to the use of a user-supplied redirect parameter and no protection in place. An attacker can redirect a user to a malicious site and possibly obtain sensitive...

WordPress Ninja Forms <3.3.18 - Cross-Site Scripting

WordPress Ninja Forms plugin before 3.3.18 contains a cross-site scripting vulnerability. An attacker can inject arbitrary script in includes/Admin/Menus/Submissions.php via the begindate, enddate, or formid parameters. This can allow an attacker to steal cookie-based authentication credentials a...

Ninja Forms 3.8.6-3.8.10 - Cross-Site Scripting

The Ninja Forms WordPress plugin before 3.8.11 does not escape an URL before outputting it back in an attribute, leading to a Reflected Cross-Site Scripting which could be used against high privilege users such as admin id: CVE-2024-7354 info: name: Ninja Forms 3.8.6-3.8.10 - Cross-Site Scripting...

PT-2026-104081

The Ninja Forms – The Contact Form Builder That Grows With You plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Paragraph Text RTE Field Submission in all versions up to, and including, 3.15.4 due to insufficient input sanitization and output escaping. This makes it possible...

PT-2026-104083

The Ninja Forms - File Uploads plugin for WordPress is vulnerable to arbitrary file operations in all versions up to, and including, 3.3.34 via the external Amazon S3 upload flow. The plugin trusts an attacker-supplied file path from the form submission and stores it as the upload's file path,...

CVE-2026-0740

CVE-2026-0740 : Ninja Forms - File Upload = 3.3.26 未认证任意文件上传。 描述： 用于 WordPress 的 Ninja Forms - File Uploads 插件存在未认证任意文件上传漏洞，原因是在所有版本（包括 3.3.26）的 'NFFUAJAXControllersUploads::handleupload' 函数中缺少文件类型验证和权限检查。 此漏洞允许未认证的攻击者： 为任意 fieldid 生成有效的 nonce。 使用白名单绕过技术上传任意文件。 强制服务器端将白名单扩展名（.pdf）重命名为 PHP 扩展名。 上传...

CVE-2026-0740

ninja.py 一个针对 WordPress 站点 Ninja Forms 插件文件上传端点的实验性/工具脚本。它会依次向 list.txt 中的目标发送请求，并将成功的上传写入 shell.txt 文件。 要求 Python 3 requests（通常随 urllib3 一起安装） pip install requests urllib3 文件结构 文件| 说明 ---|--- ninja.py| 主脚本。 list.txt| 目标 URL；每行一个 URL（http/https，可选端口）。空行将被忽略。 shell.txt| （输出）成功上传时以追加模式（a）保存 shell...